Privacy Policy

1. Introduction

TeamVole ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our mobile application ("App") and related services.

By using TeamVole, you agree to the collection and use of information in accordance with this policy. If you do not agree with this policy, please do not use our App.

2. Data Controller

For the purposes of the General Data Protection Regulation (GDPR), the data controller responsible for your personal data is:

3. What Data We Collect

We collect the following categories of personal data:

3.1 Account Information

• Email address - Required for account creation and authentication
• Password - Encrypted and stored securely via Supabase Auth
• Name / Display name - Used to identify you to other users
• Profile photo - Optional, displayed on your public profile
• Google Account data - If you sign in with Google (name, email, profile photo)

3.2 Profile Information

• Phone number - Optional, used for contact via WhatsApp or direct calls
• Sports preferences - Your preferred sports and skill levels
• User type - Player, Coach, or Venue profile designation
• Bio / Description - Optional information you choose to share

3.3 Activity and Game Data

• Games created - Sport type, title, description, date, time, location
• Games joined - Your participation status in activities
• Location data - Game venue names, approximate coordinates (latitude/longitude)
• Skill level - Self-reported skill level for matchmaking
• Player limit settings - Number of players needed for games
• Recurring series data - Patterns and schedules for repeating games

3.4 Communication Data

• Comments - Messages posted on game pages
• Chat messages - In-app conversations with other users
• Ratings and reviews - Ratings you give and receive from other players

3.5 Coach and Venue Data

• Venue email - Optional public contact email
• Venue website - Optional website URL
• Venue description - Information about your venue or coaching services
• Featured ad status - Whether you have purchased promotional placement

3.6 Technical Data

• Push notification token - Device token for sending notifications (stored securely)
• Device type - iOS or Android (for platform-specific features)
• App usage data - Feature usage, crash logs, and performance analytics
• IP address - Collected automatically by our servers for security purposes

3.7 Payment-Related Data (for paid games)

• Game price settings - Amount per player set by organizers
• Paid game indicators - Whether a game requires payment

4. How We Use Your Data

We use your personal data for the following purposes:

5. Legal Basis for Processing

Under GDPR, we rely on the following legal bases:

• Contractual necessity: Processing required to provide our services (account management, game organization, communication features)
• Consent: For push notifications, marketing communications, and optional profile features. You can withdraw consent at any time.
• Legitimate interests: For app analytics, security, fraud prevention, and community features like ratings
• Legal obligation: When required by applicable law

6. Cookies and Analytics

6.1 What Are Cookies

Cookies are small text files stored on your device that help us improve your experience. Our App uses cookies and similar technologies for authentication, preferences, and analytics.

6.2 Types of Cookies We Use

6.3 Analytics

We use analytics tools to understand how users interact with our App. This data is aggregated and anonymized where possible. Analytics help us improve features, fix issues, and optimize performance.

You can disable analytics tracking through your device settings or by contacting us.

7. Data Sharing and Third Parties

We do not sell your personal data to third parties. We only share data in the following circumstances:

7.1 Service Providers

• Supabase - Cloud database and authentication services
• Google - OAuth authentication (if you use Google Sign-In)
• Apple Push Notification Service (APNS) - For iOS push notifications
• Firebase Cloud Messaging (FCM) - For Android push notifications
• Hosting and cloud infrastructure providers - For app operation

7.2 Other Users

Certain data is visible to other App users by design:

• Your name, profile photo, and sports preferences
• Games you create or join (excluding exact location until you share it)
• Comments and ratings you post publicly
• Coach/Venue contact information you choose to display

7.3 Legal Requirements

We may disclose your data if required by law, court order, or governmental regulation, or if necessary to protect our rights, property, or safety, or that of our users.

7.4 Business Transfers

If TeamVole is involved in a merger, acquisition, or asset sale, your data may be transferred as part of that transaction. We will notify you before your data is transferred and becomes subject to a different privacy policy.

8. Data Retention

We retain your personal data only as long as necessary:

• Account data: Retained until you delete your account
• Game data: Retained for 2 years after game completion for historical and dispute resolution purposes
• Comments and ratings: Retained until deleted by you or the content owner
• Push tokens: Retained until you log out, uninstall the App, or disable notifications
• Analytics data: Retained for up to 26 months, then aggregated or deleted
• Inactive accounts: May be deleted after 3 years of inactivity

After the retention period expires, your data is securely deleted or anonymized.

9. Data Security

We implement appropriate technical and organizational measures to protect your personal data:

• Encryption in transit (TLS/SSL) and at rest
• Secure authentication via Supabase with password hashing
• Role-based access controls for database operations
• Regular security assessments and updates
• Limited employee access to personal data

While we strive to protect your data, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security.

10. Location Data

TeamVole collects location information to help users find and organize sports activities:

• Game locations: When creating a game, you provide a venue name and approximate coordinates
• Map features: Location data is used to display game locations on maps within the App
• No background tracking: We do not track your precise location continuously or in the background
• Permission-based: Any precise location access requires your explicit consent

11. Push Notifications

With your consent, we send push notifications for:

• Game reminders and updates
• New participant notifications
• Chat and comment alerts
• Coach/Venue promotional content (if applicable)

You can disable push notifications at any time through:

• Your device settings (iOS: Settings > Notifications > TeamVole; Android: Settings > Apps > TeamVole > Notifications)
• Or by contacting us at sharifkhlief@gmail.com

12. Children's Privacy

TeamVole is not intended for children under 13 years of age (or 16 in the European Union). We do not knowingly collect personal data from children. If you are a parent or guardian and believe your child has provided us with personal data, please contact us immediately at sharifkhlief@gmail.com, and we will delete the information.

13. Your Rights

Depending on your location, you have the following rights regarding your personal data:

13.1 GDPR Rights (European Users)

• Right to Access: Request a copy of your personal data
• Right to Rectification: Correct inaccurate or incomplete data
• Right to Erasure ("Right to be Forgotten"): Request deletion of your data
• Right to Restrict Processing: Limit how we use your data
• Right to Data Portability: Receive your data in a structured, machine-readable format
• Right to Object: Object to processing based on legitimate interests or direct marketing
• Right to Withdraw Consent: Withdraw consent at any time (without affecting prior lawful processing)
• Right to Lodge a Complaint: File a complaint with your local data protection authority

13.2 CCPA Rights (California Users)

• Right to Know: Request disclosure of categories and specific pieces of personal information collected
• Right to Delete: Request deletion of personal information collected from you
• Right to Opt-Out: Opt-out of the sale of personal information (Note: We do not sell personal information)
• Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights
• Right to Correct: Request correction of inaccurate personal information

13.3 Apple App Store Requirements

• You can request deletion of your account and associated data
• Data deletion requests are processed within required timeframes
• Certain data may be retained for legal compliance purposes

13.4 Google Play Store Requirements

• Account deletion is available through the App or by contacting us
• Deletion requests remove user-generated content and personal identifiers
• Aggregated analytics data may be retained in de-identified form

13.5 How to Exercise Your Rights

To exercise any of these rights, please contact us at sharifkhlief@gmail.com. We will respond within 30 days (or sooner as required by applicable law). For your protection, we may need to verify your identity before processing your request.

14. Account Deletion

You can request deletion of your TeamVole account at any time. When you delete your account:

• Your profile, personal information, and account credentials are permanently deleted
• Games you created may remain visible but will be anonymized (attributed to "Deleted User")
• Your comments may remain but will be anonymized
• Ratings you gave may be removed; ratings you received may remain as aggregate scores
• Push notification tokens are immediately deleted

To request account deletion, email us at sharifkhlief@gmail.com with the subject "Account Deletion Request" from your registered email address.

15. International Data Transfers

Your data may be transferred to and processed in countries outside your country of residence, including the United States and European Union countries, where our service providers operate. We ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) approved by the European Commission, to protect your data during international transfers.

16. Third-Party Links and Services

Our App may contain links to third-party websites or services, such as WhatsApp for communication or external payment processors. This Privacy Policy does not apply to those third parties. We encourage you to review the privacy policies of any third-party services you interact with.

When you use WhatsApp integration, your interaction is governed by WhatsApp's Privacy Policy. We do not control or monitor WhatsApp communications.

17. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by:

• Posting the updated policy in the App
• Sending a push notification or email (if you have enabled notifications)
• Updating the "Last Updated" date at the top of this policy

Your continued use of the App after changes constitutes acceptance of the updated policy. If you do not agree with the changes, please discontinue use and delete your account.

18. Compliance Summary

This Privacy Policy is designed to comply with the General Data Protection Regulation (GDPR) for users in the European Economic Area, the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA) for California residents, and the privacy requirements of the Apple App Store and Google Play Store.

19. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

For GDPR-related inquiries, you may also contact your local data protection authority. For California residents, you may contact the California Attorney General's Office.